Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/j7t-nmA2rv3PeoUhSq0yzoIggcg.roa
File: j7t-nmA2rv3PeoUhSq0yzoIggcg.roa (raw, json)
Hash identifier: mblJrhbDJEI8vgGUmLWyvaCVPD4eVgigtgRTisYau+s=
Subject key identifier: 8F:BB:7E:9E:60:36:AE:FD:CF:7A:85:21:4A:AD:32:CE:82:20:81:C8
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018FFBA8B29A359A5B79223B93D030200464
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/j7t-nmA2rv3PeoUhSq0yzoIggcg.roa
Signing time: Sun 09 Jun 2024 06:21:27 +0000
ROA not before: Sun 09 Jun 2024 06:21:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44547
IP address blocks: 212.16.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 00:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:fb:a8:b2:9a:35:9a:5b:79:22:3b:93:d0:30:20:04:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jun 9 06:21:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8fbb7e9e6036aefdcf7a85214aad32ce822081c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:59:58:20:ac:92:a8:9c:49:b1:79:ce:df:fb:
f3:91:4d:94:b7:41:14:b7:1a:c7:14:2a:f3:51:b6:
8f:c7:62:28:0d:7c:16:34:c7:1d:71:85:60:d4:ae:
1b:2c:88:e4:5f:6c:02:e2:33:0d:7e:83:62:21:2d:
cc:c4:e6:5c:f7:8a:d7:c6:17:04:96:a7:5e:28:99:
24:65:69:0c:bc:ad:d8:dc:9b:d5:e4:a9:78:c1:af:
95:44:ab:1f:a5:50:c8:97:bb:a8:49:9a:aa:82:b8:
c2:8f:d9:63:6b:99:a6:83:6c:0b:ad:4e:de:67:20:
d5:71:7e:e2:aa:58:3c:c0:08:45:85:71:96:0b:c5:
9a:da:59:2c:bc:9b:a8:85:b4:ea:b1:99:6f:b6:97:
a9:f8:62:b5:79:49:c4:31:1f:8d:12:0e:02:30:01:
8c:39:14:ec:a6:cb:f3:e3:b5:3d:16:88:3f:cb:51:
c3:f1:8d:25:22:bf:48:b2:54:46:33:83:0d:3f:9e:
30:3a:cc:f5:93:20:12:97:3a:65:28:e1:16:59:f6:
b9:d5:c3:b3:64:4c:d6:35:64:ac:76:47:35:b6:e0:
ba:1e:1e:b6:af:15:7f:6e:c8:f7:0f:62:a8:83:3f:
9e:d4:de:06:cc:38:81:52:78:dd:28:be:2a:bb:64:
cd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BB:7E:9E:60:36:AE:FD:CF:7A:85:21:4A:AD:32:CE:82:20:81:C8
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/j7t-nmA2rv3PeoUhSq0yzoIggcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.16.87.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:c9:0a:e8:2b:fd:d4:5c:98:ba:da:09:9f:9b:ff:75:98:43:
1f:d0:ae:c7:26:6a:5d:2a:81:fd:0a:21:3f:83:d7:41:b8:20:
0a:2f:d0:c8:fc:3b:ad:06:da:71:78:b8:32:a8:be:f3:23:be:
5d:06:5f:7d:56:f9:8c:76:1d:7a:47:24:fd:2c:5f:8c:47:d2:
06:c8:9e:36:a9:60:2c:79:09:c5:bd:61:46:6a:56:f6:a7:66:
52:41:03:7b:b8:21:01:a6:09:84:eb:f5:91:72:92:1f:6d:fd:
84:de:d5:5c:be:5a:45:b3:1c:9f:07:3e:d7:6b:5c:3c:df:82:
9f:0a:fc:57:6b:be:9f:b5:e7:ef:b8:67:32:54:8a:51:11:fb:
78:12:75:95:0c:df:36:2a:d5:7f:0f:f3:91:07:61:d2:34:72:
65:e2:d9:7c:2f:0f:b2:ba:86:23:49:ad:9d:7e:50:62:d4:75:
c0:0b:3e:d2:a8:93:f0:b3:8a:fa:f6:14:79:25:7e:3b:f8:35:
ec:bf:0f:b5:45:b5:44:46:16:25:7d:69:93:53:7d:92:6c:2a:
22:a8:98:68:b6:6d:c7:c7:70:cf:f1:7c:e0:d6:c8:5d:db:e0:
a1:db:45:55:17:a0:22:76:45:87:4d:8a:ce:b6:55:16:37:cb:
21:1b:78:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:50:47 2024 by rpki-client on console-ams.rpki-client.org